From 972f1463e1afcd7b3cf5efe1fa3ab16717886f8e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Oct 2023 08:09:06 +0200 Subject: [PATCH] Bump github/codeql-action from 2.22.2 to 2.22.4 (#1255) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.22.2 to 2.22.4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/d90b8d79de6dc1f58e83a1499aa58d6c93dc28de...49abf0ba24d0b7953cb586944e918a0b92074c80) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/checks.yml | 8 ++++---- .github/workflows/semgrep.yml | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index 6d298df5c..67ed0e518 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -76,12 +76,12 @@ jobs: - name: Checkout repository uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Initialize CodeQL - uses: github/codeql-action/init@d90b8d79de6dc1f58e83a1499aa58d6c93dc28de # v2.22.2 + uses: github/codeql-action/init@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2.22.4 with: config-file: ./.github/codeql.yml languages: javascript - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@d90b8d79de6dc1f58e83a1499aa58d6c93dc28de # v2.22.2 + uses: github/codeql-action/analyze@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2.22.4 format: name: Formatting runs-on: ubuntu-22.04 @@ -214,7 +214,7 @@ jobs: with: args: . --sarif --output njsscan-results.sarif || true - name: Upload njsscan report to GitHub - uses: github/codeql-action/upload-sarif@d90b8d79de6dc1f58e83a1499aa58d6c93dc28de # v2.22.2 + uses: github/codeql-action/upload-sarif@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2.22.4 if: ${{ failure() || success() }} with: sarif_file: njsscan-results.sarif @@ -613,7 +613,7 @@ jobs: scan-ref: . template: "@/contrib/sarif.tpl" - name: Upload Trivy report to GitHub - uses: github/codeql-action/upload-sarif@d90b8d79de6dc1f58e83a1499aa58d6c93dc28de # v2.22.2 + uses: github/codeql-action/upload-sarif@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2.22.4 if: ${{ failure() || success() }} with: sarif_file: trivy-results.sarif diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 2531bcab5..6414ca0c7 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -23,7 +23,7 @@ jobs: env: SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }} - name: Upload Semgrep report to GitHub - uses: github/codeql-action/upload-sarif@d90b8d79de6dc1f58e83a1499aa58d6c93dc28de # v2.22.2 + uses: github/codeql-action/upload-sarif@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2.22.4 if: ${{ failure() || success() }} with: sarif_file: semgrep.sarif